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Top Stories 

• Millions of people from Maine to the Carolinas awoke October 30 without electricity, and 
New York City was all but closed off by car, train, and air as superstorm Sandy steamed 
inland, still delivering punishing wind and rain. The U.S. death toll climbed to 39, many of 
the victims killed by falling trees. - Associated Press (See item 1) 

• High winds and heavy rain prompted the closing of the New Jersey Turnpike’s Hudson 
County Extension between Exit 14 and the Holland Tunnel, the closing of the major toll 
road between Exit 8 and Exit 7, and speed restrictions of 45 mph for the nearly 100 miles 
below Exit 12, the Newark Star- Ledger reported October 30. - Newark Star-Ledger (See 
item 12) 

• Verizon Communications said October 30 that its wireline service was suffering as 
flooding in its central offices in lower Manhattan affected its back-up generators and 
batteries. - Reuters (See item 35 ) 

• A witness heard an explosion near his home in Pacific, Washington, October 28 that turned 
out be some kind of homemade explosive that destroyed an important U.S. Geological 
Survey (USGS) flood monitoring device on the flood prone White River. - Northwest 
Cable News (See item 42 ) 
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Energy Sector 

1. October 30, Associated Press - (National) At least 39 dead, millions without power 
in Sandy’s aftermath. Millions of people from Maine to the Carolinas awoke October 
30 without electricity, and New York City was all but closed off by car, train, and air as 
superstorm Sandy steamed inland, still delivering punishing wind and rain. The U.S. 
death toll climbed to 39, many of the victims killed by falling trees. The full extent of 
the damage in New Jersey, where the storm roared ashore October 29 with hurricane- 
force winds of 80 mph, was unclear. Police and fire officials, some with their own 
departments flooded, fanned out to rescue hundreds. More than 8.2 million people 
across the east were without power. Airlines canceled more than 15,000 flights around 
the world. The storm also disrupted the presidential campaign with just a week to go 
before Election Day. Lower Manhattan, which includes Wall Street, was among the 
hardest-hit areas after the storm sent a nearly 14-foot surge of seawater, a record, 
coursing over its seawalls and highways. The New York Stock Exchange was closed 
for a second day, and said it will reopen October 31. A huge fire destroyed as many as 
100 houses in a flooded beachfront neighborhood October 30, an incident in which 3 
people were injured. A huge swell of water swept over the small New Jersey town of 
Moonachie, near the Hackensack River, and authorities struggled to rescue about 800 
people. 

Source: http://www.foxnews.com/weather/2012/10/30/at-least-17-dead-millions- 
without-po wer-in- s and y- aftermath/ 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials and Waste Sector 



2. October 30, Associated Press - (New York; New Jersey) Nuclear plants shut down 
units as storm hits coast. Parts of two nuclear power plants in New Jersey were shut 
down October 29 and October 30, while another plant in New York was put on alert 
after waters from Hurricane Sandy rose 6 feet above sea level. One of the units at New 
York’s Indian Point was shut down October 29 because of external electrical grid 
issues, said Entergy Corp., which operates the plant. The company said there was no 
risk to employees or the public, and the plant was not at risk due to water levels from 
the Hudson River. One unit at the Salem plant in Hancocks Bridge, New Jersey, was 
shut down October 30 because four of its six circulating water pumps were no longer 
available, according to PSEG Nuclear. The pumps are used to condense steam on the 
non-nuclear side of the plant. New Jersey’s Oyster Creek was already out of service for 
scheduled refueling. But high water levels at the facility, which sits along Bamegat 
Bay, prompted safety officials to declare an “unusual event”. About two hours later, the 
situation was upgraded to an “alert,” the second-lowest in a four-tiered warning system. 
Conditions were still safe at Oyster Creek, Indian Point, and all other U.S. nuclear 
plants, said the Nuclear Regulatory Commission (NRC). A rising tide, the direction of 
the wind and the storm’s surge combined to raise water levels in Oyster Creek’s intake 
structure, the NRC said. The agency said that water levels were expected to recede 
within hours and that the plant is watertight and capable of withstanding hurricane- 
force winds. The plant’s owner, Exelon Corp., said power was also disrupted in the 
station’s switchyard, but backup diesel generators were providing stable power, with 
more than two weeks of fuel on hand. 

Source: http://www.ellwoodcityledger.com/news/business/nuclear-plants-shut-down- 
units-as-storm-hits-coast/article Oa59366a-2cfd-5556-b28d-c586e8ce7del.html 
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Critical Manufacturing Sector 

3. October 29, Softpedia - (International) Ford website hacked by NullCrew, user 
credentials leaked online. The latest target of the hacker collective known as 
NullCrew was the Web site of car manufacturer Ford. The hackers claimed to have 
leveraged an SQL Injection vulnerability in order to gain access to the databases behind 
the social.ford.com subdomain. As a result of the breach, database and table names, 
customer usernames - represented by email addresses - and encrypted passwords were 
leaked. In total, 18 credential sets were published online. Most of the affected 
individuals appeared to be employed at an ad agency called Team Detroit. “No 
confidential information was compromised by the incident. Our teams have been 
working on determining how this happened and have changed all site passwords as a 
precaution,” a Ford Global Digital Communications spokesman said. 

Source: http://news.softpedia.com/news/Ford-Website-Hacked-by-NullCrew-User- 
Credentials-Leaked-Online-3Q2688.shtml 
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Defense Industrial Base Sector 



4. October 30, Global Security Newswire - (Tennessee) Y-12 operator takes over site 
defenses. Y-12 National Security Complex security personnel previously overseen by a 
subcontractor are now under management of the nuclear arms facility’s private 
operator, the Knoxville News Sentinel reported October 29. Babcock & Wilcox 
Technical Services Y-12 previously said it would cut ties with WSI-Oak Ridge, a 
division of G4S Government Solutions, and assume most of its site protection 
responsibilities. The move came after a July break-in by peace activists revealed a 
number of security lapses at the Tennessee complex. The firm said it took over 
protection duties during a 28-day changeover period. 

Source: http://www.nti.org/gsn/article/v-12-operator-takes-over-site-defenses/ 

T Return to topi 

Banking and Finance Sector 

5. October 30, Techworld - (International) Bank phishing gang arrested after hotel 
swoop. U.K. police arrested three men accused of being involved in large-scale Trojan 
phishing attacks against a range of banks, Techworld reported October 30. Picked up in 
a London hotel after an operation described as “intelligence-led”, the two unnamed 
Romanians and a Nigerian were arrested October 29 on suspicion of money laundering 
and conspiracy to defraud, police said. The men are alleged to be behind the 
appearance of 2,000 bogus bank login pages that had been part of a campaign to steal 
account details. The police press release did not go into much detail beyond confirming 
that the attacks had hit a sizable number of bank users, leading to the theft of money. 
Computers were seized while further searches are being carried out in London and the 
Midlands. 

Source: http://news.techworld.com/securitv/3408031/bank-phishing-gang-arrested- 
after-hotel-swoop/ 

6. October 29, Ventura County Star - (California) Ventura police identify ‘wigout 
bandit’ suspect in recent bank robberies. Ventura, California police and the FBI 
October 29, identified a man dubbed the “wigout bandit,” a suspect in recent bank 
robberies and other crimes. The suspect is wanted on suspicion of three robberies since 
August and got his nickname because he wore a different wig every time he robbed a 
bank, authorities said. The robberies occurred August 1 at a U.S. Bank, and August 23 
at a Chase Bank, as well as at a Rabobank. The suspect is known to frequent hotels in 
Ventura, Oxnard, and Santa Barbara and is considered armed and dangerous, 
authorities said. 

Source: http://www.vcstar.com/news/2012/oct/29/ventura-police-identify-man- 
allegedly-for-recent/ 

7. October 29, Chicago Tribune - (Illinois) Elmer Fudd Bandit’ hits 5th bank on 
northwest side. A robber dubbed the “Elmer Fudd Bandit” — because of his cap and 
plaid flannel shirt — is suspected of hitting his fifth bank in the Chicago area since 
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mid-October, authorities said. In the most recent heist, the robber implied he had a gun 
when he entered a bank in the Oriole Park neighborhood October 29, according to a 
police official. The man approached a teller and presented a note demanding cash, 
according to a FBI spokeswoman. After receiving an undisclosed amount of money, the 
robber fled on foot, she said. The robber then got into a mid-sized car that sped away. 
The FBI said the same robber is believed to have struck four other times: a robbery 
October 13 at a TCF Bank in Chicago; an attempted robbery October 14 at a TCF Bank 
in Des Plaines; a robbery October 15 at a Charter One branch in Norridge; and the 
October 24 robbery of a TCF Bank branch in Stickney. 

Source: http://www.chicagotribune.com/news/local/breaking/chi-police-report- 
northwest-side-bank-robbed-20 121 029,0,4 1 44488 . story 

For more stories, see items 1 and 32 
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Transportation Sector 

8. October 30, Cherry Hill Courier-Post - (New Jersey) Garden State Parkway 
reopened. The entire length of the Garden State Parkway reopened after a 129-mile 
stretch was closed in both directions from Woodbridge to the southern terminus 
because of flooding caused by Hurricane Sandy, the Cherry Hill Courier-Post reported 
October 30. The New Jersey governor said that motorists should not drive unless 
absolutely necessary because 200 other State roads remain closed. The Lincoln Tunnel 
was open, and the Holland Tunnel was closed under further notice. The George 
Washington Bridge, Goethals Bridge, Bayonne Bridge and Outerbridge Crossing were 
reported closed until further notice. All Delaware River Port Authority toll crossings 
reopened to traffic October 29. 

Source: 

http://www.courierpostonline.com/article/20121030/NEWS01/310300039/Garden- 

State-Parkway-reopened 

9. October 30, WOWK 13 Charleston - (West Virginia) Interstate 68 closed due to 
severe conditions. According to a press release, the West Virginia Department of 
Transportation, the West Virginia Department of Homeland Security, and the 
Monongalia County Homeland Security closed Interstate 68 from Exit 10, the Cheat 
Lake exit, to the West Virginia and Maryland State line due to treacherous road 
conditions until further notice, WOWK 13 Charleston reported October 30. 9-1-1 
dispatchers said several vehicles were stranded on the roadway. Emergency crews were 
on the scene. 

Source: http://www.wowktv.com/story/19948994/interstate-68-closed-due-to-severe- 
conditions 

10. October 30, Associated Press - (Maryland) Bay Bridge reopens after storm. The Bay 
Bridge in Maryland reopened October 30 after being closed for about 18 hours because 
of superstorm Sandy, according to the Maryland Transportation Authority. All the 
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major bridges and tunnels operated by the authority were open, although some 
remained under wind restrictions. 

Source: http://www.sfgate.com/news/article/Bav-Bridge-reopens-after-storm- 
399307Q.php 

11. October 30, WAVE 3 Louisville - (Kentucky) Two children dead, others injured 
after school bus crash. Two children died and others were injured after a school bus 
crashed and rolled over in Carroll County, Kentucky. According to a Kentucky State 
Police trooper, nine children and two adults were on board bus number 140 when it 
crashed October 29. Two children were pronounced dead at the scene, and three were 
transported to a children’s hospital. One child was transported to another hospital in 
Lexington, and an additional three children were released to their parents after the 
crash. The adult assistant on the bus was transported to a hospital. The driver was 
uninjured. The children’s hospital stated they were treating children for broken bones 
and head injuries. The bus was equipped with seat belts, and police said it appears all 
the children were wearing their seat belts at the time of the crash. Police said they 
believe the bus veered off the road, partially overturned, and then slammed into a tree. 
Source: http://www.wafb.com/storv/19946187/school-bus-overturns-in-carroll-co- 
crash-possible-injuries 

12. October 30, Newark Star-Ledger - (New Jersey) Hurricane Sandy wreaks continued 
havoc on N.J. roads, public transit. High winds and heavy rain prompted the closing 
of the New Jersey Turnpike’s Hudson County Extension between Exit 14 (Newark 
Airport/I-78/Routes 1&9) and the Holland Tunnel, the closing of the major toll road 
between Exit 8 (Route 33/Hightstown/Freehold) and Exit 7 (Route 
206/Bordentown/Trenton), and speed restrictions of 45 mph for the nearly 100 miles 
below Exit 12 (Carteret/Rahway), the Newark Star- Ledger reported October 30. A 
travel ban remained in effect in Atlantic County, and personal vehicles were barred 
from Jersey City and Hoboken. New Jersey Transit train and bus service remained 
suspended, and Port Authority Trans-Hudson trains were still not running. The New 
Jersey governor said October 29 that transportation officials would have to assess the 
flooding before making a decision on when commuters could again take trains and 
buses to work. The Bayonne and Goethals bridges and the Outerbridge Crossing — the 
three spans from New Jersey to Staten Island — were closed. The Interstate 95/Scudder 
Falls Bridge above Trenton was closed the overnight October 29 because of downed 
wires across the roadway, while Philadelphia area crossings over the Delaware River 
were restricted to emergency vehicles and essential personnel, officials said. 

Source: 

http://www.ni.com/news/index.ssf/2012/10/hurricane sandy wreaks continu.html#inc 
art river 



13. October 30, Reuters - (New York) Sandy leaves unprecedented challenges for New 
York City subways. The giant storm Sandy wreaked havoc on the New York City 
subway system, flooding tunnels, garages, and rail yards, and threatening to paralyze 
the country’s largest mass-transit system for days, Reuters reported October 30. All 
seven subway tunnels running under the East River from Manhattan to Queens and 
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Brooklyn took in water, and any resulting saltwater damage to the system’s electrical 
components would have to be cleaned, in some cases off-site, before the system can be 
restored, a spokeswoman for the Metropolitan Transit Authority (MTA) said October 
30. The MTA’s Metro North Railroad lost power on its suburban Hudson and New 
Haven lines, while there was flooding in an East River tunnel used by the Long Island 
Rail Road, the agency said. The city closed subway, bus, and commuter train systems 
October 28, a full day before Sandy — one of the biggest storms to ever hit the United 
States — made landfall October 29 in neighboring New Jersey. About 5.3 million 
people on average use the New York City’s subway system during weekdays. 

Source: http://www.reuters.com/article/2012/10/30/us-storm-sandy-subwav- 
idUSBRE89T0SU20121030 



For more stories, see items 1 and 18 



T Return to top i 

Postal and Shipping Sector 

Nothing to report 
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Agriculture and Food Sector 

14. October 29, U.S. Food and Drug Administration - (National) BT McElrath 
Chocolatier, Inc. announces nationwide recall of peanut butter pave due to 
possible health risks. McElrath Chocolatier, Inc. initated a voluntary recall of the 
seasonal peanut butter pave October 26 because it has potentially been contaminated 
with Salmonella due to the expanded Sunlad Inc. recall, the U.S. Food and Drug 
Admnistration announced in an update October 29. The recall included four best by 
dates and four lot numbers. The recalled UPC codes are 693868102117 and 
69386905312. The products were distributed nationwide through retail stores, mail 
order, and direct sales. 

Source: http://www.fda.gov/Safety/Recalls/ucm326118.htm 
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Water Sector 



15. October 30, Associated Press - (Maryland) Power loss causes sewage overflow in 
Md. State officials said a power outage caused by superstorm Sandy at a water 
reclamation plant in Savage, Maryland, resulted in a sewage overflow of 2 million 
gallons per hour into the main stem of the Little Patuxent River, the Associated Press 
reported October 30. Officials said the overflow began October 29 when a storm- 
induced power supply loss from both electrical feeders caused the overflow. Crews 
with the Bureau of Utilities were working with utility BGE to restore power. Officials 
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said because of the severity of Hurricane Sandy, no action immediate action was taken 
to mitigate the damage. 

Source: http://www.abc27.com/storv/19949116/power-loss-causes-sewage-overflow- 
in-md 



16. October 30, Kingston Daily Freeman - (New York) Kingston sewage treatment plant 
shuts down after flooding, transformer failure. Utility workers October 30 worked 
to repair a transformer at the Kingston, New York’s wastewater treatment plant after 
the unit malfunctioned, forcing the plant to cease normal operations, according to the 
Alderman-at-Large. He expected the repair to made and the plant to be up and running 
again before the end of that day. He said the plant had ceased operations after the 
Rondout Creek, along which the plant sits, overflowed its banks and 7 -foot-high berms 
around the plant. The breach occurred as Hurricane Sandy was making its way across 
the region. The water from the creek was pumped out of the plant, and the facility 
returned to normal operation about two hours later. Shortly after that, however, a 
transformer that also was flooded blew out, causing the plant to malfunction again. The 
disruption in the plant’s operation meant untreated solid waste was going directly into 
the creek. He did not know how much untreated waste had gone into the creek. Other 
than the flooding along the Rondout, the city did not experience any serious damage 
from Sandy. 

Source: 

http://www.dailvfreeman.com/articles/2012/10/30/news/doc508fe60050066329969122. 

txt 

17. October 30, Associated Press - (New York) Sewage goes into Hudson from Yonkers 
NY plants. Health officials in Westchester County, New York, said partially treated 
sewage has been entering the Hudson River from two plants in Yonkers. The county 
asked Con Edison to cut power to the Yonkers Wastewater Treatment Plant October 
29. The decision was made to protect workers and equipment due to flooding. The 
plant was being pumped out overnight. Later that night, the North Yonkers station 
became flooded and its pumps went out of service. That allowed the release of screened 
raw sewage into the Hudson River. 

Source: http://poststar.com/news/state-and-regional/sewage-goes-into-hudson-from- 
yonkers-ny-plants/article 2dab9009-732b-58a5-849c-bcd55581el8c.html 

18. October 30, Manasquan Patch - (New Jersey) Manasquan: Travel, water 
restrictions. Due to the devastation caused by Hurricane Sandy and an initial review of 
the damage, Manasquan, New Jersey, enacted travel restrictions in several areas of 
town. In addition, officials received word from the South Monmouth Regional Sewage 
Authority (SMRSA) that their nine pump stations located throughout South Monmouth 
County were flooded and inaccessible, according to a borough release October 30. 

With the pump station down and inaccessible, sewerage could not be received, causing 
backups in residential sewerage lines and homes. “Please avoid using your water, sink, 
toilets, and bathtubs as best as possible,” the release said. Once the flooding recedes 
crews would be able to access the pump stations and make them operable. Until 
SMRSA gains access, no municipality can address the issue. 
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Source: http://manasquan.patch.com/articles/travel-water-restrictions-in-place-in- 
manasquan 

19. October 30, Associated Press - (New Jersey) Tidal surge overruns 2 NJ towns with 
floodwaters. A huge tidal surge sent water overflowing a creek and gushing out of 
storm drains in two northern New Jersey towns October 30, filling streets with up to 5 
feet of water and setting off a frantic rescue effort by boats and trucks. In Moonachie a 
police spokesman said water rose to 5 feet within 45 minutes, making roads impassable 
and cutting off residents who thought the worst from superstorm Sandy was over. The 
floodwaters also knocked out the police and fire departments, forcing them to relocate 
to a business in a neighboring community. Rescuers had trouble using boats to carry 
out rescues because water levels were varying from several feet to only inches. Trucks 
were also used. In neighboring Little Ferry, residents reported water suddenly started 
gushing out of storm drains October 29, and that within 90 minutes there was four feet 
of water in the road and entering houses. Residents of Little Ferry, situated near the 
confluence of the Hackensack River and a major creek, had put out sandbags and said 
they thought they had escaped damage when the water started coming out of the storm 
drains. Rescued residents were taken to the gym at a vocational-technical school in 
neighboring Teterboro. Local and county officials reported during the night that a levee 
had broken but the governor said that turned out to be incorrect. 

Source: http://www.wtop.com/1211/3099089/Levee-breaks-in-NJ-town 

20. October 29, Monroe News Star - (Louisiana) Hillside water system issues boil 
advisory. The Hillside Park Subdivision Water System issued a boil advisory October 
29 which was expected to remain in effect until October 30. The water system is 
operated by Liberty Water Company (LWC). Water system crews were taking samples 
in five different locations in western Ouachita Parish, which would be provided to the 
Louisiana Department of Environmental Quality for testing October 29. LWC officials 
anticipated the boil advisory would be lifted sometime October 30. The Department of 
Health and Hospitals advised people under the boil advisory to disinfect their water 
prior to consumption by boiling or other methods listed in a statement. 

Source: http://www.thenewsstar.com/article/20121029/NEWS01/121029Q26/Hillside- 
water-system-issues-boil-advisory 
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Public Health and Healthcare Sector 



21. October 30, Associated Press - (New York) NYC hospital evacuated. A backup 
generator failed at the New York University Tisch Hospital October 29, forcing it to 
move out more than 200 patients, including 20 babies from neonatal intensive care. 
Dozens of ambulances lined up around the block as doctors and nurses began the slow 
process of evacuation. Some were on respirators operating on battery power. Without 
power, there were no elevators, so patients — some of whom are being treated for 
cancer and other serious illnesses — were carefully carried down staircases. 
Ambulances came from around the city to help transport the sick. Patients were taken 
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to other hospitals including Mount Sinai and the Memorial Sloan-Kettering Cancer. 
Most of the power outages in lower Manhattan, where Tisch is located, were due to an 
explosion at an electrical substation, officials said. 

Source: http://www.foxllonline.com/dpp/news/NYC-hospital-evacuated 

22. October 30, New Jersey Journal - (New Jersey) Palisades Medical Center fully 
evacuated. Palisades Medical Center was fully evacuated October 30, according to a 
North Bergen, New Jersey township spokesman. The medical center began evacuations 
after two generators failed around 11 p.m. October 29. Township police officers, 
firefighters, DPW workers, and public officials were able to get two new generators to 
the medical center. The medical center was able to evacuate 83 patients to Hackensack 
Medical Center, including 13 that were on life support. The effort was coordinated by 
the North Bergen Police Department along with EMS and McCabe ambulance. 

Source: 

http://www.ni.com/hudson/index.ssf/2012/10/palisades medical center fully.html 

23. October 29, McAllen Monitor - (Texas) Prison sentences, restitution ordered in 
Medicaid fraud case. A U.S. District Judge sentenced the former owner of Sarah’s 
Pharmacy to a two year prison term and ordered she pay $440,708 in restitution for 
Medicaid fraud, the McAllen Monitor reported October 29. Her assistant was also 
sentenced to 18 months in prison. According to court records, the women submitted 
false claims for prescriptions that were not dispensed or for drugs that patients were not 
prescribed. The women used the pharmacy’s gift shop to hide the paper trail. 

Source: http://www.themonitor.com/news/local/article b9438044-2233-lle2-8016- 
0019bb30f31a.html 
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Government Facilities Sector 



24. October 30, WIS 10 Columbia - (South Carolina) Security breach could cost State 
more than $12 million. The security breach that put millions of South Carolinians’ 
social security numbers and credit cards in jeopardy could cost the State more than $12 
million in fees to companies that will be working to protect those citizens and 
investigate the data theft. The South Carolina governor said October 30 that the State 
negotiated a capped rate of $12 million with Experian, the company providing credit 
monitoring and lifetime fraud protection to those affected by the data breach. The State 
already paid $125,000 to Mandiant, which is investigating how the breach of the 
Department of Revenue’s servers happened and how to protect the State’s online 
systems in the future. The governor also noted that out the hundreds of thousands of 
credit card numbers that were taken, none of the unencrypted cards were active. 

Experts have told the State that it may take up to 6-8 months for those who have stolen 
social security numbers to start using them for fraudulent activity. Those same experts, 
according to the governor, said that after a year the likelihood for fraudulent activity 
goes way down. The governor said 533,000 people have called the hotline and 287,000 
have signed up for the offered services. 
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Source: http://www.wbtv.com/storv/19951015/halev-security-breach-could-cost-state- 
more-than- 12-million 



25. October 30, Associated Press - (Texas) Suspect charged in Texas A&M campus 
bomb threat. A man was charged October 29 in a false bomb threat at Texas A&M 
and a female friend accused in a similar hoax at Texas State University in San Marcos 
is being investigated in both cases. Texas A&M police said October 30 that they both 
are in a relationship. Police allege he emailed a threat to A&M in College Station 
October 19. He was arrested hours later on unrelated fraud charges. 

Source: http://www.star-telegram.com/2012/10/3Q/4373868/suspect-arrested-in-texas- 
am-campus.html 

26. October 29, Huntington Patch - (New York) Wind damages Whitman High 
School. Several chunks of Whitman High School’s roof blew off October 29 as 
Hurricane Sandy brought high winds and rain to the Suffolk, New York area. The 
school’s north gym, a separate building, was serving as a Suffolk County Red Cross 
shelter; it was undamaged. The South Huntington schools superintendent announced 
that the district canceled classes October 30 because of concern about the weather. 
Source: http://huntington.patch.com/articles/wind-damages-whitman-high-school 
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Emergency Services Sector 

27. October 30, Philadelphia Main Line Times - (Pennsylvania) Hurricane Sandy 
coverage: Emergency personal will not respond in hurricane level winds. The 
Chester County, Pennsylvania Emergency services for hurricane operations for police, 
fire, and EMS along with Lower Merion fire officials have said for the safety of the 
personnel, the organization will discontinue response to all calls when sustained wind 
speeds reach 50 mph or wind gusts are over 65 mph. When the order to cease response 
is given due to hazardous wind conditions, as reported by Philadelphia Main Line 
Times October 30. Operations during the period of the eye of the hurricane passes 
would be limited to re-securing the fire station. All operations during the eye of the 
hurricane will only be performed if they can be done safely. Personnel will help 
citizens who come to the station when it would be a danger to release them. 

Source: 

http://mainlinemedianews.com/articles/2012/10/30/main line suburban life/news/doc5 
08ee5 8c96d4 1 692867 645 ■txt?viewmode=fullstory 



28. October 30, Associated Press - (Arkansas) Search under way for convicted killer 
who escaped from maximum-security prison in Arkansas. Authorities continued to 
search for a convicted killer who escaped from a maximum-security prison in 
Arkansas. The search continued October 30 for the inmate who is serving a 40-year 
sentence at the Tucker Unit. A correction department spokeswoman said the inmate and 
another inmate escaped the prison October 29 by hiding in an empty water tank atop an 
18-wheel tractor-trailer. The other inmate was back in custody October 29. 
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Source: 

http://www.therepublic.com/view/story/a6569f40d54c44c2acf3b3f0560a6a8e/AR— 

Inmate-Escapes-Arkansas 

For more stories, see items 1 and 19 
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Information Technology Sector 

29. October 30, SC Magazine UK - (International) Hurricane Sandy could cause 
problems in cyber space. With Hurricane Sandy colliding with the East Coast, cyber 
criminals are likely to take advantage of the historic storm to make money or steal 
personal information from the unsuspecting. Like with most major news events, users 
should be on the lookout for legitimate-looking scams that will use the hurricane’s 
mainstream allure to dupe them. “If the past repeats itself, Facebook postings, tweets, 
emails and websites claiming to have exclusive video or pleading for donations for 
disaster relief efforts will appear shortly after the storm hits,” security company Avast 
warned October 29. “These messages often include malicious code that attempt to 
infect computers with viruses, spyware or Trojan horses.” Online vandals have also 
been known to bait users through a technique known as black-hat search engine 
optimization (SEO), in which search results are poisoned so the attackers’ sites appear 
near the top of rankings. Natural disasters lend a particularly lucrative hand to cyber 
criminals because many users want to make donations to victims. As such, they can be 
easily tricked into giving their money away to bogus sites that appear to be charities, 
such as the American Red Cross. 

Source: http://www.scmagazineuk.com/hurricane-sandv-could-cause-problems-in- 
cyber-space/article/265955/ 

30. October 30, Threatpost - (International) EFF raises questions on privacy leaks in 
Ubuntu. The Elonic Frontier Foundation (EFF) is warning users of Ubuntu’s latest 
release that the open-source operating system sends their search queries to third parties, 
including Amazon, by default, and that some of their search results may be viewable by 
other users on the same network. The privacy leaks are present in Ubuntu 12.10 and the 
group says that Canonical, which runs the Ubuntu project, should disable the inclusion 
of online search results by default and make it clearer to users what is being done with 
their search queries and IP addresses. The issues that the EFF is raising are related to a 
feature called Dash in the Ubuntu Unity desktop that is designed to be a central search 
mechanism for documents, files, and other information both on the local machine and 
online. When a user searches for a given term, the query is sent to a Ubuntu server, and 
the query also includes his/her IP address. The search results, depending upon the 
query, may include products from Amazon related to the search term. 

Source: http://threatpost.com/en us/blogs/eff-raises-questions-privacy-leaks-ubuntu- 
103012 
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31. October 30, The H - (International) ICS-CERT warns of increasing threat to 
industrial control systems. The Industrial Control Systems Cyber Emergency 
Response Team (ICS-CERT) issued a warning about special tools and search engines 
that make attacks on systems and devices in infrastructures simple even for 
inexperienced attackers. Tools aimed at cracking digital control systems from 
companies such as GE, Rockwell Automation, Schneider Electric, and Koyo were 
released earlier in 2012. Tools for CoDeSys software from 3S Software also recently 
appeared. These tools lower the barriers for attackers by removing the need for 
specialist knowledge in order to carry out an attack. Special search engines such as the 
Shodan Computer Location Service and the Every Routable IP Project (ERIPP) are also 
making attacks simpler for attackers. One team of researchers told ICS-CERT that they 
used Shodan to discover more than 500,000 unsecured devices which use supervisory 
control and data acquisition (SC AD A) and other industrial control systems (ICS). 
Source: http://www.h-online.com/security/news/item/ICS-CERT-wams-of-increasing- 
threat-to-industrial-control-svstems-1739808.html 

32. October 30, Wired - (International) Oops, e-mail marketer left Walmart, Capital 
One and others open to easy spoofing. Following a recent story about a widespread 
email vulnerability involving weak cryptographic keys, system administrators at many 
companies around the world began to check their DNS records to make sure that the 
DKIM keys they were using to authenticate their email were at least 1,024 bits in 
length — the recommended standard for secure authentication of email. No doubt, if 
they found they were using substandard keys, they replaced those keys with stronger 
ones to secure their corporate business email. However, according to one researcher, 
these companies may be overlooking third-party emailers who are responsible for 
sending out marketing newsletters and other communication to customers on their 
behalf. In fact, email marketing company Epsilon Interactive, which thought it fixed the 
problem a year ago, left Walmart, TD Ameritrade, TiVo, and others open to easy 
spoofing. 

Source: http://www.wired.com/threatlevel/2012/10/dkim-third-party-emailers/ 

33. October 30, Help Net Security - (International) Facebook investigates data leak from 
1 million accounts. Facebook will be launching an internal investigation following the 
revelation by Czech blogger that data belonging to over 1 million Facebook users was 
offered for sale for $5. The blogger bought the data, which contained full names, email 
addresses and Facebook profile URLs, examined it, and discovered that some of the 
data is accurate. After making the discovery public on his blog, the blogger said he was 
contacted by Facebook. The company asked the blogger to forward them the data, then 
delete the file in his possession, name the Web site from which he bought it, remove 
some details from his blog, and keep any correspondence between them a secret. 
“Facebook is vigilant about protecting our users from those who would try to expose 
any form of user information. In this case, it appears someone has attempted to scrape 
information from our site and combine the information with data publicly available 
elsewhere on the web,” Facebook commented the situation for Ars Technica. 

Source: http://www.net-securitv.org/secworld.php?id= 13870 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, 
please contact US -CERT at sos@us-cert.gov or visit their Web site: 
http://www.us-cert.gov 

Information on IT information sharing and analysis can be found 
at the IT ISAC (Information Sharing and Analysis Center) Web 
site: https://www.it-isac.org 

[ Return to top ] 



Communications Sector 



34. October 30, ZDNet- (New York; National) Hurricane Sandy knocks out NYC data 
centers: Websites, services down. Hurricane Sandy-caused power outages have 
knocked much of the East Coast offline, but also preemptive substation shutdowns to 
prevent damage to electricity infrastructure substation equipment is affecting data 
centers and online services around the world, ZDNet reported October 30. New York 
City’s Consolidated Edison shut down large portions of the power grid in lower 
Manhattan to prevent damage to underground equipment, leaving more than an 
estimated 1 million without power. Within minutes, Gawker.com and technology Web 
site Gizmodo.com crumbled, saying a data center battery failure forced the sites to fall 
down at their lower Manhattan data center. Also affected was Buzzfeed.com citing 
similar problems, and LiveStream.com said it was experiencing a “major outage.” In 
spite of being on the other side of the Atlantic, many are affected by the outages. 
HuffingtonPost.com remains down for many, after the publication said it was 
experiencing “technical difficulties.” 

Source: http://www.zdnet.com/hurricane-sandv-knocks-out-nyc-data-centers-websites- 
services-do wn-70000065 8 8/ 



35. October 30, Reuters - (National) Hurricane Sandy disrupts Northeast US telecom 
networks. Verizon Communications said October 30 that its wireline service was 
suffering as flooding in its central offices in lower Manhattan affected its back-up 
generators and batteries. The company said that its engineers were on site October 29 
and were beginning to assess damage. Sprint Nextel said it was seeing outages at some 
cell sites because of the power outages across all the States in Sandy’s path including 
New York, New Jersey, Connecticut, Pennsylvania, Washington D.C., Maryland, 
northern Virginia, and New England. People complained of outages to their cable 
telephone, Internet, and television services from providers ranging from Comcast Corp, 
Cablevision Systems Corp, and Verizon in New Jersey, Connecticut, and New York. 
Cablevision said it was experiencing widespread service interruptions primarily related 
to loss of power. Cell phone service also appeared to be spotty for other top providers 
AT&T Inc and T-Mobile USA, a unit of Deutsche Telekom, according to some 
customers. 

Source: http://www.reuters.com/article/2012/10/30/uk-storm-sandv- 
telecommunications-idUSLNE89T02220121030 



- 14 - 



[ Return to top ] 



Commercial Facilities Sector 



36. October 30, Associated Press - (Virginia) Alexandria braces for flooding, 

apartments damaged. An Alexandria, Virginia apartment building had its roof torn 
open by strong winds from superstorm Sandy, and the city is bracing for possible 
flooding in Old Town, the Associated Press reported October 30. An Alexandria 
spokesman said about 20 people in a garden-style apartment building were evacuated 
when the roof was damaged by the wind. The building was condemned, and residents 
all found places to stay. Alexandria officials planned to distribute sandbags October 30 
at Market Square in front of City Hall. He said the sandbags are primarily for business 
owners along the riverfront. Many homes in Alexandria had tree damage. About 1 1,000 
Alexandria residents were without power. He said the city’s infrastructure and historic 
sites were in good condition after the storm. 

Source: http://www.wset.com/storv/19950190/roofs-of-3-buildings-tom-by-wind-in- 
alexandria 



37. October 29, Associated Press - (Florida) One dead, one charged after apartment 
meth lab explosion. One man was dead and another faced charges following what 
authorities believed was a meth lab explosion in Niceville, Florida, October 27. 
Officials said one suspect suffered severe burns on his face, neck, chest, and arms. He 
was taken to local hospital, where he later died. Police said the other suspect was 
arrested after being forcibly removed from the burning home. According to the 
Northwest Florida Daily News, neighbors told officers the suspect threatened to kill 
them for calling police. A police report said the suspect faced aggravated assault and 
resisting arrest charges. The exact cause of the fire remained under investigation, but 
investigators referred to the crime as an “alleged methamphetamine lab” explosion. 
Source: http://www.wihg.com/home/headlines/One-Dead-Qne-Charged- After- 
Apartment-Explosion- 176318891 .html 

38. October 29, Associated Press - (California) City sweeps up after rowdy Series 
celebration. Police made dozens of arrest during a rowdy World Series celebration in 
the hours after the San Francisco Giants clinched the World Series. The San Francisco 
Police Department reported October 29 that 35 people were arrested, 22 on felony 
charges. Two people were arrested on gun charges. Bonfires of trash were lit in several 
intersections around the city, and a public transit bus was torched. Windows of several 
businesses and vehicles were broken, including a news van. Firefighters had police 
escorts as they fought fires fueled by couches, news racks, and other debris. Much of 
the vandalism occurred in the city’s Mission District, where 24 of the arrests occurred. 
Source: http://news.vahoo.com/citv-sweeps-rowdy-series-celebration-180533442— 
spt.html 

For more stories, see items 32 and 41 
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National Monuments and Icons Sector 



Nothing to report 
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Dams Sector 



39. October 30, Nextgov - (National) Army Corps monitors Northeast rivers for 
flooding, provides critical support. To help control flooding in New England in the 
wake of Hurricane Sandy, the Army Corps of Engineers would use 171 satellite 
monitoring stations to measure river levels and manage flood control dams, Nextgov 
reported October 30. A spokesman for the Corps’ New England District said the 
monitoring stations can “record every drop of water” from the storm and transmit the 
information every 15 minutes via the National Oceanic and Atmospheric 
Administration’s Geostationary Operational Environmental Satellite. The Corps uses 
this information to help manage operation of its 35 flood control dams in New England, 
by closing or throttling back the flow of water through the dams. The Corps also 
operates hurricane surge barriers in New Bedford, Massachusetts; Providence, Rhodes 
Island; and Stamford, Connecticut. The barriers help control flooding. 

Source: http://www.nextgov.com/defense/2012/10/armv-corps-monitors-northeast- 
rivers-flooding-provides-critical-support/59119/ 

40. October 29, Boston Herald - (Massachusetts) Waves spilling over Scituate seawall as 
Sandy hits early. Hurricane Sandy started tossing waves over the Scituate, 
Massachusetts seawall about an hour earlier than town officials expected — a surprise 
they hoped would spur stubborn, weather-hardened coastal residents to heed an 
evacuation warning, the Boston Herald reported October 29. The storm began hurling 
water over the seawall two full hours before high tide. “As folks see that happening, 
they may decide it’s time to evacuate to the shelter, or elsewhere with family and 
friends,” a Town Administrator said of oceanfront residents. The town set up a pet- 
friendly shelter at Scituate High School, including 20 cots, lunch tables, and children’s 
games. Only two evacuees had shown up when a Herald reporter checked in October 
29. 

Source: http://news.bostonherald.com/news/regional/view .bg?articleid=1061 171 152 

41. October 29, Cherry Hill Patch - (New Jersey) Mandatory evacuation ahead of 
possible dam failure. Officials in Cherry Hill, New Jersey, ordered a mandatory 
evacuation for all residents along Park Boulevard near the Armory because of rising 
waters at the Evans Mill Dam and fears those conditions could cause a failure. This 
evacuation applied to residents of the Farrell Place mobile home park, the Habitat 
Apartments, and several homes between Sayre Avenue and the Park Place 
Condominiums. It does not include residents of the condominiums themselves. Police 
and the fire department were at the mobile home park to evacuate residents. Buses were 
available to whisk residents away from the area. Residents were urged first to try to 
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arrange stays with family or friends. An emergency shelter was also available at Cherry 
Hill High School East. Water had nearly topped the dam by late in the day, and the 
main spillway and overflows were torrents of whitewater. 

Source: http://cherrvhill.patch.com/articles/mandatorv-evacuation-ahead-of-possible- 
dam-failure 



42. October 29, Northwest Cable News - (Washington) Bomb destroys flood gauge on 
eve of storm. A witness heard an explosion near his home in Pacific, Washington, 
October 28 that turned out be some kind of homemade explosive that destroyed an 
important U.S. Geological Survey (USGS) flood monitoring device on the flood prone 
White River. The device uplinks critical river flow information to the Web for flood 
managers from several agencies. The U.S. Army Corps of Engineers used it for the 
operation of the Howard Hanson Dam upstream. The agencies were expecting to use it 
during the upcoming rain storms forecasted for October 30 and the rest of the week. 
The box is so vital for flood protection that USGS technicians replaced it in a matter of 
a few hours. Pacific police were not commenting on the case, but did say they have not 
arrested anyone and have no suspects at this time. The boxes provide a network that 
give agencies an overall flood picture so they can evacuate homes and close streets if 
necessary hours before the flood waters arrive. 

Source: 

http://www.nwcn.com/home/?fId=176356601&fPath=/news/local&fDomain=10212 
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